2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-21881 | CRITICAL | 9.9 | 37.1% | Dec 22, 2021 | An OS command injection vulnerability exists in the Web Manager Wireless Network Scanner functionality of Lantronix Prem... |
| CVE-2021-21880 | HIGH | 7.2 | 2.4% | Dec 22, 2021 | A directory traversal vulnerability exists in the Web Manager FsCopyFile functionality of Lantronix PremierWave 2050 8.9... |
| CVE-2021-21879 | HIGH | 8.8 | 3.7% | Dec 22, 2021 | A directory traversal vulnerability exists in the Web Manager File Upload functionality of Lantronix PremierWave 2050 8.... |
| CVE-2021-21878 | MEDIUM | 4.9 | 1.2% | Dec 22, 2021 | A local file inclusion vulnerability exists in the Web Manager Applications and FsBrowse functionality of Lantronix Prem... |
| CVE-2021-21877 | CRITICAL | 9.1 | 2.7% | Dec 22, 2021 | Specially-crafted HTTP requests can lead to arbitrary command execution in “GET” requests. An attacker can make authenti... |
| CVE-2021-21876 | CRITICAL | 9.1 | 2.7% | Dec 22, 2021 | Specially-crafted HTTP requests can lead to arbitrary command execution in PUT requests. An attacker can make authentica... |
| CVE-2021-21875 | CRITICAL | 9.1 | 2.9% | Dec 22, 2021 | A specially-crafted HTTP request can lead to arbitrary command execution in EC keypasswd parameter. An attacker can make... |
| CVE-2021-21874 | CRITICAL | 9.1 | 2.9% | Dec 22, 2021 | A specially-crafted HTTP request can lead to arbitrary command execution in DSA keypasswd parameter. An attacker can mak... |
| CVE-2021-21873 | CRITICAL | 9.1 | 2.9% | Dec 22, 2021 | A specially-crafted HTTP request can lead to arbitrary command execution in RSA keypasswd parameter. An attacker can mak... |
| CVE-2021-21872 | CRITICAL | 9.9 | 6.1% | Dec 22, 2021 | An OS command injection vulnerability exists in the Web Manager Diagnostics: Traceroute functionality of Lantronix Premi... |
| CVE-2021-45267 | MEDIUM | 5.5 | 0.6% | Dec 22, 2021 | An invalid memory address dereference vulnerability exists in gpac 1.1.0 via the svg_node_start function, which causes a... |
| CVE-2021-45266 | HIGH | 7.5 | 1.1% | Dec 22, 2021 | A null pointer dereference vulnerability exists in gpac 1.1.0 via the lsr_read_anim_values_ex function, which causes a s... |
| CVE-2021-45263 | MEDIUM | 5.5 | 0.6% | Dec 22, 2021 | An invalid free vulnerability exists in gpac 1.1.0 via the gf_svg_delete_attribute_value function, which causes a segmen... |
| CVE-2021-45262 | MEDIUM | 5.5 | 0.6% | Dec 22, 2021 | An invalid free vulnerability exists in gpac 1.1.0 via the gf_sg_command_del function, which causes a segmentation fault... |
| CVE-2021-45261 | MEDIUM | 5.5 | 0.7% | Dec 22, 2021 | An Invalid Pointer vulnerability exists in GNU patch 2.7 via the another_hunk function, which causes a Denial of Service... |
| CVE-2021-45260 | MEDIUM | 5.5 | 0.6% | Dec 22, 2021 | A null pointer dereference vulnerability exists in gpac 1.1.0 in the lsr_read_id.part function, which causes a segmentat... |
| CVE-2021-44659 | CRITICAL | 9.8 | 2.5% | Dec 22, 2021 | Adding a new pipeline in GoCD server version 21.3.0 has a functionality that could be abused to do an un-intended action... |
| CVE-2021-43804 | HIGH | 7.3 | 2.2% | Dec 22, 2021 | PJSIP is a free and open source multimedia communication library written in C language implementing standard based proto... |
| CVE-2021-43631 | CRITICAL | 9.8 | 1.1% | Dec 22, 2021 | Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the appointment_no parameter in payment... |
| CVE-2021-43630 | HIGH | 8.8 | 2.0% | Dec 22, 2021 | Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via multiple parameters in add_patient.php.... |
| CVE-2021-43629 | CRITICAL | 9.8 | 1.1% | Dec 22, 2021 | Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via multiple parameters in admin_home.php. |
| CVE-2021-43628 | CRITICAL | 9.8 | 1.1% | Dec 22, 2021 | Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the email parameter in hms-staff.php. |
| CVE-2021-43158 | MEDIUM | 4.3 | 0.5% | Dec 22, 2021 | In ProjectWorlds Online Shopping System PHP 1.0, a CSRF vulnerability in cart_remove.php allows a remote attacker to rem... |
| CVE-2021-43157 | CRITICAL | 9.8 | 1.1% | Dec 22, 2021 | Projectsworlds Online Shopping System PHP 1.0 is vulnerable to SQL injection via the id parameter in cart_remove.php. |
| CVE-2021-43156 | MEDIUM | 6.5 | 0.5% | Dec 22, 2021 | In ProjectWorlds Online Book Store PHP 1.0 a CSRF vulnerability in admin_delete.php allows a remote attacker to delete a... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now